A company is reviewing its IAM policies. One policy written by the DevOps Engineer has been flagged as too permissive. The policy is used by an AWS Lambda function that issues a stop command to Amazon EC2 instances tagged with Environment: NonProductionover the weekend. The current policy is:

What changes should the Engineer make to achieve a policy of least permission? (Choose three.)

A.

B.

C.

D.

E.

F.